Matching PMHHS

URI: MP-PMHHS

Description: Finds a non-trivial Process running on a host whose physical host is a Mobile Console Host that may be located in a Space, plus associated process network access contexts from that Space, and optionally an interactive Process user.

Root Pattern: R-PMHHS

R-PMHHS

Finds a Process running on a host whose physical host is a Mobile Console Host, which may be located in a Space.

(empty)

P.L.PMHHS.2.1

Use of Process by reconnecting stolen device Host to networks in Space: an attacker with possession of physical device MobileClient and access to Space can reconnect Host to networks accessible from Space and exploit their ability to control how Process makes use of that connectivity to access services.

Matching PMHHS

R-PMHHS

Construction Patterns (0)

Threat Patterns (1)

P.L.PMHHS.2.1